NetSight
IP …
medium6.8

CVE-2013-4422

SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitr…

Impact

SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message.

Affected products

VendorProductAffected versions
Quassel-IrcQuassel Irc
through 0.9.0
Versions 0.1.0, 0.3.0, 0.3.0.1, 0.3.0.2, 0.3.0.3

Weakness classification

CWE-89

References